$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa File: d33242c2-4936-3b9e-a769-0abece0988f0.roa (raw, json) Hash identifier: pAPtRifNgYPodVZGXT7gkTq13hLC21FBWYfKqI1cR3Q= Subject key identifier: 5E:04:B7:D4:0A:03:4B:C5:4D:E0:18:4C:53:D3:13:59:E4:B7:51:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBD05AD328A8F6FB772D0F900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.45.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:ad:32:8a:8f:6f:b7:72:d0:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=9af50b3f-ab94-4ef2-bd4f-69c00dcbf630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:80:28:95:c1:2a:32:f0:49:ad:a8:75:a1: dc:9a:c0:24:12:ac:99:9b:83:21:a0:4e:66:34:e5: 14:6f:f1:ef:f9:3e:de:59:b2:36:00:4a:35:ff:44: 09:cd:90:e1:f6:36:e8:93:9a:31:e6:65:27:4b:1f: 5c:0b:22:07:89:a2:d9:35:09:6c:34:db:15:01:dd: 85:27:eb:c7:7d:d7:41:ad:d3:ac:10:f0:3a:a0:a7: fe:44:8a:6e:83:81:f2:e7:f7:09:bd:c0:5d:e4:65: f6:a9:60:5d:b9:5f:2c:dc:89:f8:7c:ba:aa:96:da: d0:f1:12:a9:6d:fe:09:89:6a:e4:f1:9a:50:0b:a3: 71:b0:6f:5e:90:63:dc:61:24:00:4d:ae:15:f8:8b: 34:87:02:d0:64:19:9a:bc:d3:da:c5:db:7d:94:15: c3:1c:9e:12:91:c6:f0:eb:81:9b:31:b5:15:41:c7: cf:7c:25:d4:7e:45:a9:a5:4d:c8:ef:e4:d4:85:7e: bd:83:3c:3e:ec:ea:44:c8:20:34:00:d7:0a:ae:41: d6:c4:98:83:31:9a:ae:48:1e:29:32:14:56:fe:04: 78:eb:63:a9:bc:de:fc:5d:fa:20:43:0c:47:06:2e: 80:d3:c3:34:c2:16:cf:09:93:a3:0a:71:84:ed:88: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:04:B7:D4:0A:03:4B:C5:4D:E0:18:4C:53:D3:13:59:E4:B7:51:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:55:71:91:95:7b:88:61:2e:78:16:93:36:e2:e6:cf:58:7c: fc:e9:49:d2:73:45:d2:22:20:c6:ab:35:4a:46:8b:69:55:08: e0:7f:81:20:78:e0:b7:ad:44:cc:c6:f5:de:a2:c7:06:e8:5d: ec:3a:cf:9a:a3:8e:08:da:1d:60:ee:24:5a:61:45:7a:ab:16: 5c:91:09:0a:bb:25:0f:e3:93:e0:c3:9a:68:10:3d:8a:0d:af: 89:c9:7f:de:60:18:61:ae:5b:ef:c5:cd:ed:8c:2f:2a:f1:20: 84:1d:78:ec:28:1f:12:f6:c8:7c:bd:05:73:4e:19:42:37:5c: 36:20:70:5a:54:81:a1:48:a6:7b:0c:d6:72:35:02:0a:05:a6: 8e:44:b6:e8:71:b4:b4:1d:cf:4c:23:5f:9a:ad:34:df:85:78: b3:85:44:80:e2:3e:0a:e2:a6:4b:58:b7:b5:1e:6c:96:10:f4: 23:94:fb:56:aa:c1:62:4c:69:fe:10:9d:c6:a0:e1:ae:a7:a9: 28:b5:58:f8:88:4d:96:24:7c:31:b4:90:57:6d:40:c2:bd:eb: d1:72:fb:d1:3d:ab:c5:05:00:e5:46:87:1b:0b:b8:25:40:56: 41:17:dd:a5:23:6a:8d:1f:3d:7c:23:0b:ff:22:02:af:01:af: a8:55:21:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29Ba0yio9vt3LQ+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk OWFmNTBiM2YtYWI5NC00ZWYyLWJkNGYtNjljMDBkY2JmNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGqAKJXBKjLwSa2odaHcmsAkEqyZm4MhoE5m NOUUb/Hv+T7eWbI2AEo1/0QJzZDh9jbok5ox5mUnSx9cCyIHiaLZNQlsNNsVAd2F J+vHfddBrdOsEPA6oKf+RIpug4Hy5/cJvcBd5GX2qWBduV8s3In4fLqqltrQ8RKp bf4JiWrk8ZpQC6NxsG9ekGPcYSQATa4V+Is0hwLQZBmavNPaxdt9lBXDHJ4Skcbw 64GbMbUVQcfPfCXUfkWppU3I7+TUhX69gzw+7OpEyCA0ANcKrkHWxJiDMZquSB4p MhRW/gR462OpvN78XfogQwxHBi6A08M0whbPCZOjCnGE7YioZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4Et9QKA0vFTeAYTFPTE1nkt1FGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDMzMjQyYzItNDkzNi0z YjllLWE3NjktMGFiZWNlMDk4OGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJVcZGVe4hhLngWkzbi5s9YfPzpSdJzRdIiIMarNUpGi2lVCOB/gSB4 4LetRMzG9d6ixwboXew6z5qjjgjaHWDuJFphRXqrFlyRCQq7JQ/jk+DDmmgQPYoN r4nJf95gGGGuW+/Fze2MLyrxIIQdeOwoHxL2yHy9BXNOGUI3XDYgcFpUgaFIpnsM 1nI1AgoFpo5EtuhxtLQdz0wjX5qtNN+FeLOFRIDiPgripktYt7UebJYQ9COU+1aq wWJMaf4Qncag4a6nqSi1WPiITZYkfDG0kFdtQMK969Fy+9E9q8UFAOVGhxsLuCVA VkEX3aUjao0fPXwjC/8iAq8Br6hVIQ8= -----END CERTIFICATE-----Generated at Wed May 13 11:09:35 2026 by rpki-client